
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier: H6icfZoGMy1QoVdl1Vj5XlcPbWjm7jV/Z4cW3kRpM2E=
Subject key identifier: A4:73:6F:70:F9:69:11:04:6B:6C:D1:52:92:D1:D0:F4:02:52:C3:D6
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial: 0CDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number: 0CD5
Signing time: Wed 18 Feb 2026 17:54:59 +0000
Manifest this update: Wed 18 Feb 2026 17:54:59 +0000
Manifest next update: Wed 25 Feb 2026 17:54:59 +0000
Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: iNsr7wRh10F93BrKEQllsTt6eDFlsp+vNCFXZRAWyzo=)
2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Validity
Not Before: Feb 18 17:54:59 2026 GMT
Not After : Feb 25 17:54:59 2026 GMT
Subject: CN=6995fcf3-4ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:e4:8b:f9:2e:0a:c0:87:a5:fe:0a:d2:e5:
54:11:1c:29:68:a3:bc:25:26:e2:88:84:4d:99:bd:
90:f6:67:38:28:94:3f:4b:da:c1:f3:c4:cc:e7:af:
b5:10:47:a6:cd:0b:f5:fe:d0:d5:1f:a3:50:f5:92:
28:fc:ab:c4:fe:3e:88:17:d4:b8:98:1e:e4:63:1f:
77:7c:ba:bb:e7:e6:93:06:04:aa:5f:99:f5:ca:2a:
08:d6:81:44:f1:99:91:67:6e:7b:be:f2:65:13:10:
7f:d1:bc:82:74:13:64:e0:5e:c7:1e:c8:d3:ea:d0:
b6:36:e1:1d:3d:0d:8e:52:03:c8:b7:02:38:38:27:
06:e7:70:3e:35:ad:ca:0d:ba:8e:99:74:35:cd:6c:
f6:be:89:61:90:22:c3:ba:c5:8c:72:97:66:de:21:
7e:59:19:9d:43:a5:d5:7d:09:88:59:05:b6:05:f3:
f7:57:0d:e6:2e:a1:d2:20:78:97:e4:22:59:ad:8c:
7a:ab:69:5d:94:d8:74:a3:d4:4a:0c:17:16:48:08:
b4:a2:73:42:e1:92:04:9d:80:d3:2c:e1:b7:b4:aa:
2c:d5:e2:68:48:7b:d4:18:c1:c3:2a:8e:05:98:9a:
43:27:2e:54:76:ff:00:38:55:3a:5b:7b:1e:09:67:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:73:6F:70:F9:69:11:04:6B:6C:D1:52:92:D1:D0:F4:02:52:C3:D6
X509v3 Authority Key Identifier:
keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:51:d3:2c:59:44:ad:51:79:89:13:73:0d:14:9f:3c:bf:16:
bf:e3:1a:43:1c:7e:19:dd:43:f2:52:4f:a7:76:c0:1f:8d:72:
80:03:8e:09:76:aa:7b:34:27:88:e3:02:e9:bc:bc:a1:a5:89:
b3:e1:58:5e:15:e3:b5:35:68:8d:37:ab:38:67:d0:8d:c3:85:
5a:be:47:27:62:37:46:b6:5d:79:44:b8:3c:83:d1:20:9f:76:
d2:94:50:5e:f3:8c:21:c1:df:be:90:17:1a:71:46:07:b1:02:
b9:0a:0f:aa:28:21:8f:66:b2:d6:50:8b:80:9e:08:fb:4e:0b:
b9:d9:4a:c1:d8:4a:41:78:9f:c5:4a:21:ab:65:44:6c:53:10:
05:b2:e0:2b:37:64:cf:09:a3:84:ef:83:2d:4e:b2:17:2b:41:
01:0f:d8:00:af:7b:46:38:cb:58:6b:af:5d:3a:8d:8e:77:4a:
43:e9:5a:e9:6d:52:af:52:6a:7d:c3:48:d8:52:44:f8:14:13:
6b:c8:5c:3c:f5:de:3a:49:2b:97:1e:3a:3e:8d:76:b1:1e:af:
cb:73:63:57:3b:e3:75:b2:79:5c:18:1a:ea:e0:d8:90:5f:a6:
b9:48:ee:9e:80:3a:b5:1e:9b:dc:1b:2d:61:4b:23:96:57:95:
0d:57:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:26:28 2026 by rpki-client